25588 Commits

Author SHA1 Message Date
39868323a2 Merge pull request #26648 from containers/renovate/common-image-and-storage-deps
fix(deps): update common, image, and storage deps
2025-07-16 10:58:34 +00:00
da3df0c45b fix(deps): update common, image, and storage deps
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-16 04:46:14 +00:00
4364db989a Merge pull request #26638 from containers/renovate/common-image-and-storage-deps
Update module github.com/containers/storage to v1.59.0
2025-07-15 09:51:46 +00:00
f3761f97d1 Merge pull request #26619 from Craig-Spencer-12/exec-pid-leak-test
Fix test that checks for podman exec leaks
2025-07-15 09:38:01 +00:00
c2e4f33b91 Merge pull request #26637 from containers/renovate/github.com-opencontainers-cgroups-0.x
Update module github.com/opencontainers/cgroups to v0.0.4
2025-07-15 09:26:47 +00:00
21356fa06b Update module github.com/containers/storage to v1.59.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-15 02:16:24 +00:00
df7d787b4c Update module github.com/opencontainers/cgroups to v0.0.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 23:46:15 +00:00
6b9a3066b6 Merge pull request #26631 from Luap99/autoupdate-error
podman auto-update: include container in invalid policy message
2025-07-14 17:34:37 +00:00
9ed9da3446 Merge pull request #26602 from containers/renovate/common-image-and-storage-deps
Update common, image, and storage deps
2025-07-14 16:47:20 +00:00
55296e1c44 Fix test that checks for podman exec leaks
Updated helper function "find_exec_pid_files" and called it the "podman exec - leak check" test.

Fixes: #26616

Signed-off-by: Craig Spencer <craig.spencer812@gmail.com>
2025-07-14 12:18:17 -04:00
b05b9d043d Merge pull request #26533 from ArthurWuTW/26506
volume export: refuse to write to terminal (TTY)
2025-07-14 15:58:56 +00:00
e899f49926 Update common, image, and storage deps
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 15:42:59 +00:00
b48eb6e2fb volume export: refuse to write to terminal (TTY)
Prevent `podman volume export` from showing raw tar contents directly to the terminal (STDOUT). If not redirected and without output flag, error message is expected.

Fixes: #26506

Signed-off-by: Arthur Wu <lion811004@gmail.com>
2025-07-14 10:20:22 -04:00
ffcd19735f Merge pull request #26630 from containers/renovate/go-github.com-go-viper-mapstructure-v2-vulnerability
Update module github.com/go-viper/mapstructure/v2 to v2.3.0 [SECURITY]
2025-07-14 13:38:44 +00:00
e55270a51a podman auto-update: include container in invalid policy message
I noticed recently when I made a typo that then auto-update errored but
it did not tell me which container was incorrect so I had to check all
containers myself. Include the container ID in the error to make it
clear which container has the issue.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-14 14:34:22 +02:00
4bc22a4b3c Update module github.com/go-viper/mapstructure/v2 to v2.3.0 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 12:31:17 +00:00
76b70b630c Merge pull request #26612 from Luap99/Maintainers
Maintainers: add Lewis, Jan and Nicola as Reviewers
2025-07-14 12:30:16 +00:00
7efa0b829a Merge pull request #26611 from containers/renovate/golang.org-x-net-0.x
fix(deps): update module golang.org/x/net to v0.42.0
2025-07-11 14:28:26 +00:00
de51ef1cd6 Merge pull request #26615 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.2.2
2025-07-11 14:25:15 +00:00
c305a932cc Merge pull request #26609 from Luap99/bindings-fixes
pkg/bindings/containers: some attach/logs handling fixes
2025-07-11 14:16:31 +00:00
b059e47ff2 Merge pull request #26604 from l0rd/seccomp-winpath
Fix seccomp profile path on Windows
2025-07-11 14:13:35 +00:00
0c586807ea chore(deps): update dependency golangci/golangci-lint to v2.2.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 13:37:46 +00:00
e28445e9da Merge pull request #26575 from ypu/journalctl
System tests: Update the journalctl function to ignore No entry message
2025-07-11 13:36:54 +00:00
215cecdbaa Maintainers: add Nicola Sella as Reviewer
Nicola has done valuable contributions to the project over the past
months.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-11 12:31:16 +02:00
78d4f63b93 Maintainers: add Jan Kaluza as Reviewer
Jan has done valuable contributions to the project over the past months.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-11 12:31:16 +02:00
5731557d54 Maintainers: add Lewis Roy as Reviewer
Lewis has done valuable contributions to the project over the past
months.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-11 12:31:16 +02:00
b4ed23dc27 fix(deps): update module golang.org/x/net to v0.42.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 09:30:42 +00:00
ff1a3c5fa8 Merge pull request #26610 from containers/renovate/golang.org-x-crypto-0.x
fix(deps): update module golang.org/x/crypto to v0.40.0
2025-07-11 08:27:30 +00:00
d07dd054df Merge pull request #26607 from ygalblum/quadlet-image-pull-policy
Quadlet - add support for the Policy key for .image files
2025-07-11 08:13:38 +00:00
8987fd412a fix(deps): update module golang.org/x/crypto to v0.40.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 00:26:01 +00:00
047d231008 test/e2e: podman update make env check stricter
We don't need a tty here and then we are able to check for the
exact output.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-10 19:57:16 +02:00
a360b29626 pkg/bindings/containers: do not ignore ErrUnexpectedEOF
Do not ignore ErrUnexpectedEOF from DemuxHeader(), if we fail to parse
the header there must have been a clear protocal error between client
and server which should be reported and not silently ignored. I wonder
ig this might explain why we have missing remote exec/attach output
without any error, it is possible we are eating some internal errors due
this.

Commit ba8eba83ef added the ErrUnexpectedEOF check but without any
explanation why that would be needed. The tests from that commit pass
without it locally but not in CI. With some debugging best I found the
issue is actually a test bug. The channel is not consumed until it is
closed which means the main test exists before the log reading goroutine
is done. And if the main test exists the first step it does is to kill
the podman service which then can trigger the ErrUnexpectedEOF server on
the still open http connection and thus the test case failed there.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-10 19:57:16 +02:00
ffec133766 pkg/bindings/containers: do not create sub slice
DemuxFrame() already returns a byte slice with the correct length so
this makes it simpler and the caller does not need to check this at all.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-10 19:57:16 +02:00
f42453457c pkg/bindings/containers: don't check for short read
io.ReadFull() already returns ErrUnexpectedEOF if there was a short read
so this check is redundant and can be dropped.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-10 19:57:16 +02:00
9f264850d6 Merge pull request #26586 from Craig-Spencer-12/kube-secret-error
Clarifiy error message when using an improperly formatted secret with kube
2025-07-10 17:38:18 +00:00
439448c287 Quadlet - add support for the Policy key for .image files
Resolves: #26446

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-07-10 13:06:38 -04:00
5e44c17309 Clarifies error message when using an improperly formatted secret with kube
Fixes: #26586

Signed-off-by: Craig Spencer <craig.spencer812@gmail.com>
2025-07-10 12:19:28 -04:00
cc84e29ddd Merge pull request #26599 from giuseppe/fix-one-time-example
docs: replace fuse-overlayfs example with additionalimagestore
2025-07-10 13:09:09 +00:00
3e8b2d7d96 Fix seccomp profile path on Windows
Call specgen.ConvertWinMountPath() on seccomp profile paths provided via
security-opt parameter.

Fixes https://github.com/containers/podman/issues/26558

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-07-10 15:02:54 +02:00
86dafb60bc Merge pull request #26603 from containers/renovate/golang.org-x-term-0.x
fix(deps): update module golang.org/x/term to v0.33.0
2025-07-10 09:54:19 +00:00
c01eaa87dd fix(deps): update module golang.org/x/term to v0.33.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-10 08:47:54 +00:00
1c943f0ad8 docs: replace fuse-overlayfs example with additionalimagestore
The fuse-overlayfs example was misleading as setting fuse-overlayfs
will cause a persistent storage configuration change rather than a
one-time option.

Closes: https://github.com/containers/podman/issues/26590

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2025-07-09 23:13:41 +02:00
faf975c737 Merge pull request #26593 from Luap99/ebpf
hack/podman_cleanup_tracer.bt: fixes to make it work on newer versions
2025-07-09 19:32:59 +00:00
b59648a2d6 hack/podman_cleanup_tracer.bt: check map before deleting keys
It seems the new bpftrace version since 0.22 logs a warning if we try to
delete a key that does not exist.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-09 14:02:11 +02:00
1f8bc9d736 hack/podman_cleanup_tracer.bt: clamp str size for strcontains()
On bpftrace 0.22 this fails to compile and load so the script currently
does not show us anything in CI there.

We need to clamp the string size a bit 128 chars seems more than enough
for the podman/conmon binary path length.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-09 14:02:10 +02:00
5e5bfadf93 hack/podman_cleanup_tracer.bt: use new max str lenth
The default has been set to 1024 which should bee good enough and better
than having to unroll this loop like that.
This is supported since bpftrace 0.22 which is in fedora 42.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-09 14:02:10 +02:00
a479783d4b Merge pull request #26583 from flouthoc/libpod_build
[docs] libpod/build: add headers
2025-07-08 16:44:51 +00:00
152849ebd2 libpod/build: add headers
Add `headers` for `/libpod/build`

Closes: https://github.com/containers/podman/issues/26440

Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-07-08 06:51:32 -07:00
0737c19689 Merge pull request #26524 from mheon/libartifact_locking
Add basic locking to Libartifact
2025-07-08 13:01:25 +00:00
c735f8e237 Update the journalctl function to ignore No entry message
For currently version of journalctl, --user option only works when
the persistent storage is enabled. So we need to check this option
before we use it. Otherwise a set of tests will failed with can
not find expected output from journalctl with rootless user.

Signed-off-by: Yiqiao Pu <ypu@redhat.com>
2025-07-08 20:29:32 +08:00